Privacy Policy
Own Time Own Target Pty Ltd (OTOT)
ABN 72 658 745 209
Last updated: 22 April 2026
1. Who we are
Own Time Own Target Pty Ltd (OTOT, we, us, our) is an Australian consulting firm providing HubSpot implementation, marketing automation, CRM consulting, and digital strategy services to businesses.
We are committed to handling personal information responsibly and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Contact us about privacy:
Ian Hammond, Director
Email: ian@otot.io
Website: otot.io
2. What personal information we collect
We collect the following types of personal information:
About our clients and contacts:
- Name, job title, and company name
- Business email address and phone number
- Billing and invoicing details (including ABN and business address)
- Records of our communications and meetings
Through our website:
- Information submitted via contact or enquiry forms (name, email, message content)
- Standard website analytics data (browser type, pages visited, referring URLs — this is aggregate data and does not identify individuals)
During service delivery:
- Where a client engages us to work within their CRM, database, or marketing platform, we may access personal information of third parties (such as the client's own customers or contacts) that is held in those systems. See section 7 for how we handle this.
We do not collect sensitive information (such as health, financial, or government identifier information) unless it is directly relevant to the services we have been engaged to provide and you have consented to us collecting it.
3. How we collect personal information
We collect personal information:
- Directly from you, when you contact us, request a proposal, or engage our services
- Through our website contact forms
- From referrals or introductions by mutual contacts
- In the course of performing services, including through access to systems you authorise us to use
We will only collect personal information by lawful and fair means.
4. Why we collect personal information and how we use it
We use personal information to:
- Provide the services you have engaged us to deliver
- Communicate with you about your project, timelines, and deliverables
- Issue invoices and manage payment
- Respond to enquiries and requests
- Maintain records of our client relationships
- Send you relevant updates, insights, or information about our services — you can opt out of these communications at any time by contacting us at ian@otot.io or clicking unsubscribe in any email we send
We will not use your personal information for a purpose that is unrelated to why we collected it, unless you have given us permission or we are required to by law.
5. Who we share personal information with
We do not sell, rent, or trade personal information.
We may share personal information with third-party service providers who help us operate our business. These include:
- CRM and marketing platforms (such as HubSpot) — for managing client records and communications
- Accounting and invoicing software — for billing and financial records
- Cloud storage and productivity tools — for document management and collaboration
- Email and calendar services — for communications and scheduling
These providers are given access only to the personal information they need to perform their function. We take reasonable steps to ensure they handle personal information appropriately.
We may also disclose personal information where we are required to do so by law or in response to a valid request from a government authority.
6. How we store and protect personal information
We store personal information in cloud-based systems. Access to those systems is restricted to authorised personnel and protected by passwords, two-factor authentication, and access controls.
We take reasonable technical and organisational steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure.
We retain personal information for as long as it is needed for the purpose for which it was collected, or as required by law. When personal information is no longer needed, we take reasonable steps to destroy or de-identify it.
7. How we handle client data during service engagements
When we are engaged to work within a client's CRM, database, or marketing platform, we may access personal information about the client's own customers, contacts, or staff that is stored in those systems.
In those situations, we act as a data processor on behalf of the client. The client retains responsibility for that data and for ensuring they have the right to share it with us. We will only access and use that data to the extent necessary to deliver the agreed services, and we will not use it for any other purpose.
If you are a client and you have concerns about how we handle data accessed during a service engagement, please contact us directly at ian@otot.io.
8. Overseas disclosure
Some of the third-party platforms we use (including HubSpot) store and process data on servers located outside Australia, including in the United States and other countries.
Before disclosing personal information to overseas recipients, we take reasonable steps to ensure those recipients handle the information in a manner consistent with the Australian Privacy Principles.
By providing your personal information to us, you acknowledge that it may be transferred to, stored, or processed in countries outside Australia. Where overseas transfer occurs, we rely on the privacy and security practices of our service providers, which we have assessed as reasonable for this purpose.
9. Access and correction
You have the right to request access to the personal information we hold about you, and to ask us to correct information that is inaccurate, out of date, or incomplete.
To make an access or correction request, contact us at ian@otot.io. We will respond within a reasonable time (generally within 30 days).
We may decline an access request in limited circumstances permitted by the Privacy Act, and if we do, we will tell you why in writing.
10. Complaints
If you have a concern about how we have handled your personal information, we encourage you to contact us first.
Step 1 — Contact us:
Email: ian@otot.io
Subject line: Privacy Complaint
We will acknowledge your complaint within five business days and aim to resolve it within 30 days.
Step 2 — Office of the Australian Information Commissioner (OAIC):
If we are unable to resolve your complaint to your satisfaction, you may refer it to the OAIC.
Office of the Australian Information Commissioner
Website: oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001
11. Updates to this policy
We may update this policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available at otot.io/privacy.
The date at the top of this page shows when the policy was last updated.